External Azure OAuth 2.0 Server for Authentication #4322

5 Answer(s)

• 

  0

  maliming created 2 years ago

  Support Team Fullstack Developer

  hi

  https://docs.abp.io/en/commercial/latest/migration-guides/openIddict-step-by-step https://docs.abp.io/en/commercial/latest/modules/identity/oauth-login https://docs.abp.io/en/commercial/latest/modules/account#social-external-logins

  Save Cancel
• 

  0

  tjp102 created 2 years ago

  Hello,

  We integrated Azure AD to the ABP Angular application, allowing users to authentiate using Azure AD and the users are then added to the ABP Identity server.

  We then added the Volo.Account module and noticed that when using the SignInManager, the ABP framework pulls in an access token from Azure AD and then exchanges it for an application token which is returned to Angular and stored. Is there a way for us to not exchange the application token and keep the access token from Azure AD to call others apis with the Azure AD access token?

  Code below shows where the access token is acquired and exchanged in Volo.Abp.Account.Web.Pages.Account.Login.cshtml We print out the access token and it has the information we need, but we want that token stored in the frontend instead of the exchanged ABP token. Starting at line 191. https://github.com/abpframework/abp/blob/dev/modules/account/src/Volo.Abp.Account.Web/Pages/Account/Login.cshtml.cs

  var loginInfo = await SignInManager.GetExternalLoginInfoAsync();
          if (loginInfo == null)
          {
              Logger.LogWarning("External login info is not available");
              return RedirectToPage("./Login");
          }
  
          var result = await SignInManager.ExternalLoginSignInAsync(
              loginInfo.LoginProvider,
              loginInfo.ProviderKey,
              isPersistent: false,
              bypassTwoFactor: true
          );
          Console.WriteLine("HELLO WORLD!");
          Console.WriteLine(loginInfo.AuthenticationTokens);
          foreach(var item in loginInfo.AuthenticationTokens)
          {
              Console.WriteLine(item);
              foreach (PropertyDescriptor descriptor in TypeDescriptor.GetProperties(item))
              {
                  string name = descriptor.Name;
                  object value = descriptor.GetValue(item);
                  Console.WriteLine("{0}={1}", name, value);
              }
  

  Thanks

  Save Cancel
• 

  0

  maliming created 2 years ago

  Support Team Fullstack Developer

  hi

  the ABP framework pulls in an access token from Azure AD and then exchanges it for an application token which is returned to Angular and stored. Is there a way for us to not exchange the application token and keep the access token from Azure AD to call others apis with the Azure AD access token?

  You can't do this, it's a designed process.

  You can create a new API that returns Azure AD tokens.

  //get origin azure ad tokens
  httpContext.GetTokenAsync("access_token");
  httpContext.GetTokenAsync("id_token");
  

  Save Cancel
• 

  0

  tjp102 created 2 years ago

  Hello,

  Sounds good, thanks. For clarification, in the new API are you saying to make a new request to Azure to grab the tokens? Otherwise the tokens don't seem to exist in the HttpContext and need to be populated still.

  Thanks.

  Save Cancel
• 

  0

  maliming created 2 years ago

  Support Team Fullstack Developer

  hi

  The azure tokens will be stored in the HttpContext after you set SaveTokens to true, you can give it a try.

  

  https://learn.microsoft.com/en-us/azure/active-directory-b2c/enable-authentication-web-application-options

  Save Cancel